Each of the following is a monitoring procedure from the COSO monitoring guidance except:
A) periodic evaluation and testing of controls by the internal auditors.
B) supervisory reconciliations and other reviews of controls.
C) analysis of and follow up on metrics that might identify control failures.
D) cumulative access and authority of a super-user.

Question

Quizplus · Accepted Answer

The COSO monitoring guidance includes periodic evaluation and testing of controls by internal auditors (A), supervisory reconciliations and other reviews of controls (B), and analysis of and follow-up on metrics that might identify control failures (C). However, cumulative access and authority of a super-user is not a monitoring procedure; rather, it relates to segregation of duties and access controls.

Each of the Following Is a Monitoring Procedure from the COSO